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Modern Application Security 


Prevent Downtime and Breaches by Securing Your Modern 


Apps and APIs 


Today’s application landscape has changed dramatically. Nearly 
85% of new workloads are deployed in containers and a similar 


83% of Internet traffic is now API calls. 


Modern apps are microservices that run in containers, 
communicate via APIs, and deploy via automated 


CI/CD pipelines. 
Everything is optimized for time to market. 


And yet, in many cases, security is an afterthought. To take a 


modern approach, DevOps teams need to: 


e Integrate the non-disruptive security controls authorized by 


the security team into their automation and CI/CD processes 


«e Deploy and manage app security controls across distributed 


environments such as containers and microservices 


Implement cost-effective security controls without impacting 


release velocity or application performance 


F5 NGINX App Protect is a modern application security solution 
designed to work seamlessly in DevOps environments as you 
deliver apps from code to customer. Built on F5’s market-leading 
WAF and bot protection, NGINX App Protect runs natively on 


NGINX Plus and integrates security controls into your application. 


Why NGINX App Protect? 


OO 


App-Centric Security Built for Modern Apps CI/CD Friendly 
Deploy trusted F5 controls close to your Deliver high-performance, scalable security Centrally manage and automate approved 
apps, protecting against revenue-impacting on NGINX ADCs to enable consistent security controls to remove workflow 
attacks, data theft, reputational damage, security controls for web applications, bottlenecks and support “shift left” 
and regulatory non-compliance microservices, containers, and APIs Dev initiatives 
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NGINX App Protect integrates with NGINX Plus running as a software load balancer, 
API gateway, Kubernetes Ingress Controller, and sidecar proxy 


NGINX App Protect Features Supported Environments 


Cloud 
- Amazon Web Services (AWS) 
«e Google Cloud Platform (GCP) 


Seamless Integration with NGINX, the #1 
Web Application Platform 


e Enables strong security controls seamlessly integrated with NGINX Plus + Microsoft Azure 
e Outperforms other WAFs for improved user experience + VMware 
e Reduces complexity and tool sprawl while delivering modern apps 
Containers 

Rapid Threat Defense and Security Analytics at Scale + Docker 

e Kubernetes 
e Provides expanded security beyond basic signatures to ensure adequate controls 

e OpenShift 
e Utilizes F5 app-security technology for efficacy superior to ModSecurity and others 
e Builds on proven F5 expertise, so you can confidently run in “blocking” mode in production CPUs 
e Offers high-confidence signatures for extremely low false positives - x86 (64 bit) 


e Increases visibility, integrating with third-party analytics solutions 
Operating Systems 


Application Security as Agile as Your DevOps Processes > Alpine Linux 
e Integrates security and WAF natively into the CI/CD pipeline « centos 


« Debian 
e Deploys as a lightweight software package that is agnostic of underlying infrastructure 


Red Hat Enterprise Linux 
Ubuntu 


e Facilitates declarative policies for “security as code” and integration with DevOps tools 
- Decreases developer burden and provides feedback loop for quick security remediation 


e Accelerates time to market and reduces costs with DevSecOps-automated security To discover how NGINX can 
help you, visit nginx.com. 
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